Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/170aefc8-3064-330f-bbc7-02458f352674.roa
File:                     170aefc8-3064-330f-bbc7-02458f352674.roa (raw, json)
Hash identifier:          yCmw3RJcSFXKzvFKKazA4IJwfqSdcak/1O0P/3WxiDQ=
Subject key identifier:   EA:3F:CE:35:55:5A:EE:6C:FF:CD:06:A9:BC:3F:B8:31:F0:91:86:4F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290B3A7D1A084C807618B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/170aefc8-3064-330f-bbc7-02458f352674.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     22394
IP address blocks:        2600:1004::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:b3:a7:d1:a0:84:c8:07:61:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=ec538911-4056-4164-a402-591b3cea886a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b3:7e:24:02:8e:1d:32:b8:49:27:a5:ea:4c:
                    58:57:d3:db:58:e8:05:b2:40:94:e0:69:13:76:4d:
                    94:9f:fe:d3:81:72:16:c2:99:d1:57:b5:1c:3c:23:
                    d1:bd:53:8d:0f:51:0b:ac:8d:56:96:9b:df:f2:f0:
                    5c:1d:c4:b9:90:29:36:7b:03:54:b0:35:c7:70:d4:
                    8c:07:e4:48:e8:7d:c3:59:02:3f:3a:72:d8:84:35:
                    c8:84:13:c1:ff:cb:7d:42:1b:51:4c:7b:23:8c:3c:
                    ab:b8:3d:75:15:6f:17:44:f8:6c:d2:28:39:83:e9:
                    79:52:6d:72:0e:76:52:8b:52:90:d0:a6:13:4f:75:
                    40:e7:d6:93:8c:f8:59:dd:6f:a3:4b:cc:9e:bc:4f:
                    c9:f5:b7:c7:8f:b3:6c:da:d6:48:5b:e2:36:db:e0:
                    c2:23:dd:b3:07:74:f2:5d:65:88:d8:0a:3c:a2:3d:
                    ff:6a:08:84:3d:c6:70:ba:94:ad:78:0f:3a:47:89:
                    ba:c9:5f:55:fe:bc:ec:b8:af:d5:09:3f:de:e3:a8:
                    87:b7:52:2c:b6:ad:de:7d:41:f8:0b:32:06:e8:6a:
                    5b:67:0a:4a:03:8c:f0:fe:e1:e5:cc:30:62:9c:6b:
                    3a:f7:01:94:c5:90:23:1f:54:af:8c:f8:2c:2b:9f:
                    fc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3F:CE:35:55:5A:EE:6C:FF:CD:06:A9:BC:3F:B8:31:F0:91:86:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/170aefc8-3064-330f-bbc7-02458f352674.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:2e:eb:fa:fd:7e:6b:b5:88:86:4d:c6:07:66:af:1d:bb:d8:
         20:9b:db:c0:bb:fb:c2:6b:d5:af:2d:36:f2:29:eb:bc:a4:43:
         66:02:04:16:d4:9b:91:9b:fa:9e:ab:fd:21:bc:27:e8:20:6f:
         39:1f:08:e5:72:fc:cd:b1:a5:04:66:b0:1c:10:1a:f1:45:f5:
         6f:58:c7:e3:b2:d8:58:c8:ab:fb:75:a1:a4:31:25:00:3a:af:
         e2:60:2a:cc:8b:bb:a0:ff:56:98:c9:c1:9f:2f:02:63:ac:cc:
         b9:f5:0e:bf:46:b0:28:4b:d3:f2:9c:62:3c:23:74:03:e5:7a:
         57:c7:fb:0e:6a:54:b5:db:64:79:0f:9a:fb:0c:17:14:3c:57:
         13:ba:b9:76:93:cf:b4:c7:12:38:c1:da:50:65:60:2e:35:ce:
         26:ce:30:55:a5:3d:d3:7c:f4:3e:8b:07:5f:4c:15:33:7d:59:
         05:ee:8a:c8:86:cb:32:2b:71:f4:73:fa:d7:1f:46:83:c6:c6:
         a8:9e:3d:00:0f:ae:1e:a9:54:c2:31:13:65:3a:71:87:29:a9:
         69:e0:1d:27:79:de:4a:47:3d:e9:9f:77:c7:13:64:a1:fa:79:
         89:77:06:b0:0e:90:f6:58:ae:d6:83:86:2b:b8:cf:4c:25:71:
         95:d6:be:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:09:29 2025 by rpki-client